[dev-jodee]

Last part of step 4 (Rust dependencies): the games' own workspaces.

Changes

• pinocchio-token 0.6 → 0.7 (world-cup) and pinocchio-token-2022 0.3.1 → 0.4 (both). Gacha's prize-NFT CPIs move to the 0.7 constructors (InitializeMint2::new, MintTo::new, SetAuthority::new), with the program type supplied by the Token-2022 aliases rather than a token_program field. World-cup needed no code change.
• codama =0.9.3 → =0.13.2 (exact pin kept, since it decides the committed IDL). Both IDLs are regenerated: empty arrays are omitted, omitted discriminator fields carry a structFieldDisplayNode (skip: always), and the root version is 1.8.0. The generated Rust clients are byte-identical.
• Not changed: gacha's Light integration tests stay on light-program-test 0.23, the latest release, which still pins its own Solana 2.x and litesvm 0.7 stack (as the justfile documents).

Testing

• Locally: cargo test --workspace --no-run, cargo clippy --workspace --all-targets -D warnings (the client excluded, as in the justfile) and cargo fmt --check for both games; cargo check --tests for the Light tests; generate-idl + generate-clients leave the committed clients unchanged.
• Test runs are left to CI (just.yml: setup, check-generated, build, test).

AI disclosure

• No AI tooling was used beyond editor autocomplete.
• AI tooling was used. Tool and extent: Claude Code bumped the dependencies, ported the CPIs and regenerated the IDLs under maintainer direction.

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no actionable defects were found.

Summary

Updates token dependencies and pins Rust codama to =0.13.2 in both game workspaces.

• Gacha prize mints use the newer Token-2022 constructors.
• Both games publish IDLs in Codama’s newer format.

_{Reviews (1) · Last reviewed commit: "build(games): pinocchio-token 0.7, pinoc..." · Reviewed by Greptile}